POLARISAI ACADEMY
Forum · Open to invited membersAsk a question

Privacy policy

This page explains what Hrafninn Industries AB does with information about you when you read polaris.merthen.ai, when you sign up for the newsletter Weekly Brief (Veckans AI in Swedish), when you ask for a guide as a PDF, when you join the waitlist for Polaris AI Academy, when you practice with the AI teacher, and when you create an account or write on the forum. This is an English translation of the Swedish privacy policy; if they differ, the Swedish text applies.

Who is responsible

Hrafninn Industries AB, company registration number 559503-0023, Kungsbacka, Sweden, is the controller of the personal data. This means the company decides which information is used and why. You can reach us at info@hrafninn.se. We have no data protection officer. Questions about your data go to the same address.

When you only read the site

The site is delivered to you by Cloudflare. Cloudflare is our web host and also handles networking and security. To deliver the site, and to protect it against abuse, Cloudflare processes your IP address, the address of your internet connection. We do not store IP addresses ourselves when you only read the site. On the forum we keep the IP address of each post for 30 days. This is set out under “The forum”. Cloudflare keeps technical logs only as long as needed to deliver and protect the site. Exactly how long is set out in Cloudflare’s privacy policy.

The legal basis is legitimate interest under Article 6(1)(f) of the General Data Protection Regulation, often called GDPR. The reason is to deliver and protect the website.

Cloudflare is certified under the EU–US Data Privacy Framework. The European Commission has decided that personal data may be transferred to companies in the United States that are certified under the framework. As a fallback, Cloudflare has standard contractual clauses, contract terms drawn up by the European Commission for transfers to countries outside the EU.

The site sets a cookie only when you are signed in to the forum, to keep you signed in for 30 days. It is not used for statistics, and the site sets no other cookies. A cookie is a small file a website can store in the browser. We do not collect visitor statistics with code on the site. There are no ads, and no code from other companies runs. The fonts are on our own server.

You do not need to register or fill in any information to read the site. To write on the forum you need an account, see “The forum”. Cloudflare still processes your IP address, as described above.

Broad search among repos

When you use the broad search on the repos page, our server passes your search term on to GitHub and Hugging Face to fetch results. Your browser only contacts Polaris. We do not store the search terms. The result of a search can stay in Cloudflare’s temporary memory for up to six hours, so that the same search runs faster. It is stored with no link to you.

What your browser stores

Your browser stores three things on your own device, in what is called local storage: which chapters you have read, whether you have seen the intro on the home page, and which exercises you have done with the AI teacher. It is a memory in the browser that stays with you. The information is never sent to us. You can clear it whenever you like in the browser. It is used only to show how far you have come and to skip the intro.

The AI teacher

When you write to the AI teacher at /claude-lararen, your text, together with the latest lines of the conversation, is sent to an AI model that Cloudflare runs for us. The model writes the answer, and the answer is sent back to you. We do not store what you write or the answer, neither in a database nor in a log. When you close the page, the conversation is gone.

Cloudflare processes the text only to produce the answer and is our processor, that is, a company that processes data on our behalf and according to our instructions. The transfer to the United States takes place as described under “When you only read the site”.

So that no one can overuse the teacher, we count how many questions come from the same IP address within an hour. The count exists only in the server’s memory, for at most one hour, and is never written down.

The legal basis is legitimate interest, Article 6(1)(f): to give you the answer you ask for and to protect the service against abuse. You do not need to give any information about yourself to use the teacher. Do not enter sensitive information, for example about health, or other people’s names.

The forum

The forum is free and for people aged 18 or over. The controller is Hrafninn Industries AB, company registration number 559503-0023, Kungsbacka, Sweden. You can reach us at info@hrafninn.se.

You create an account with your email address. During the trial an invitation code is required. You sign in with a link in an email. The link is valid for 15 minutes and can be used once. A display name is optional. Your email address is never shown to others.

You must give your email address to get an account. Without it we cannot create the account or send the link. You can skip the display name.

When you are signed in, the forum sets a session cookie. A cookie is a small file a website can store in the browser. The cookie is valid for 30 days. It is needed for signing in and therefore requires no consent. It is not used for statistics. The forum sets no other cookies.

We store your email address, display name, when the account was created, when you last signed in, threads, replies, uploaded screenshots, reports, and the IP address of each post. The IP address is the address of your internet connection.

The IP address is kept for 30 days to stop spam and abuse. It is then deleted. You can write at most five posts per hour on one account. A report stores only which post it concerns and when the report was made, not who made it. A report is deleted once it has been handled and is 30 days old.

Posts and screenshots are public to everyone who reads the forum. A screenshot can contain hidden information, for example location and camera model. That information is removed before the image is stored. Before publishing, the page warns you if the text appears to contain a personal identity number, a phone number or an email address. When a post is removed, its screenshots are removed with it.

The legal basis for the account and for what you publish is contract, Article 6(1)(b). The contract is the terms at /en/forum/terms/. This also covers the draft answer: it is produced so that Daniel can reply on the forum. The legal basis for the IP address, the limit of five posts per hour, the reports and our removal of posts is legitimate interest, Article 6(1)(f). The reason is to stop spam and abuse and to be able to remove content that breaks the terms.

An account that has not signed in for 24 months is deleted automatically. The email address and display name are deleted, and the posts remain without a name. The text or an image can still reveal who you are. You can delete the account yourself. You then choose whether your posts become anonymous or are removed completely. Otherwise the posts remain until you remove them.

Daniel at Hrafninn reads the questions. An AI program on Hrafninn’s computer in Sweden produces a draft answer that only Daniel sees. Daniel writes and publishes the answer. The drafts are deleted after 90 days. Nothing is sent to another company’s AI.

The data is stored at Cloudflare in the EU, in a database and a file store. Cloudflare is a processor, that is, a company that processes data on our behalf and according to our instructions. Cloudflare is American and certified under the EU–US Data Privacy Framework. The European Commission has decided that personal data may be transferred to companies in the United States that are certified under the framework. As a fallback, Cloudflare has standard contractual clauses, contract terms drawn up by the European Commission for transfers to countries outside the EU.

The sign-in email is sent from Hrafninn’s email at one.com. one.com is based in Denmark, within the EU, and is also a processor. We do not store the emails ourselves.

We do not sell the data. The forum has no ads.

You can object to processing based on legitimate interest. This is set out under the heading “You can object”. Your other rights are set out under “Your rights”.

The Weekly Brief newsletter

Weekly Brief, our newsletter, is sent on Monday, Wednesday and Friday.

When you sign up, we store your email address, the date and time of the sign-up, and that the sign-up came from the Polaris website. We store no name. We store the time and the source to be able to show that you have consented. We keep them because Article 7(1) requires us to be able to show your consent; the legal basis is Article 6(1)(c). They are deleted together with the address.

The address is used to send the newsletter. The legal basis is your consent, Article 6(1)(a). You give consent by entering the address yourself and pressing Subscribe. You can withdraw consent at any time, without giving a reason. This does not affect mailings already sent.

The address is stored at Loops, the service that sends the newsletter, and in a list at Cloudflare. The list at Cloudflare is our own subscriber list.

Loops and Cloudflare are processors. They process the address on our behalf, according to our instructions. We do not sell your email address. We give it only to Loops, which sends the emails, and to Cloudflare, which holds our subscriber list.

You do not have to give the address. Without it you cannot receive the newsletter, but you can still read everything on the site.

Transfer to the United States

Loops is based in the United States. The transfer there takes place under Loops’ data processing agreement, the agreement on how Loops may process the address on our behalf. The agreement is based on the European Commission’s standard contractual clauses, terms the Commission has drawn up for when personal data leaves the EU.

Cloudflare is certified under the EU–US Data Privacy Framework, the framework on which the European Commission’s decision on transfers to certified companies in the United States is based.

You can get a copy of the standard contractual clauses that apply by emailing info@hrafninn.se.

How long we keep it

We keep the address until you unsubscribe or ask us to delete it. When you unsubscribe, the address is deleted both at Loops and in our list. Every mailing has an unsubscribe link.

The waitlist for Polaris AI Academy

Polaris AI Academy is a free AI school that we are building. Before it opens, you can join a waitlist at /en/academy. It has one purpose: to email you when the Academy opens and when something big happens with it. The waitlist is separate from the newsletter. Joining the waitlist does not sign you up for Weekly Brief.

When you enter your address, we send an email with a confirmation link. The address is not stored until you have opened the link and pressed Confirm. If you do not, nothing is stored, and the link stops working after 7 days.

When you confirm, we store your email address, the date and time of the confirmation, that it came from the waitlist, and which language you chose. We store no name. The legal basis is your consent, Article 6(1)(a). We store the time to be able to show that you have consented, Article 7(1). You can withdraw consent at any time, without giving a reason.

The list is kept at Cloudflare, in a separate list for the waitlist. The confirmation email and the email when the Academy opens are sent with an email service that processes the address on our behalf. Cloudflare and the email service are processors. The transfer to the United States takes place as described under the newsletter.

We never show how many people are on the list, and the list is used for nothing else. Every email has an unsubscribe link. When you unsubscribe, the address is deleted at once. For 8 days afterwards we keep only a code derived from the address with a secret key, so that an old confirmation link cannot add you back. The code does not show the address.

How long we keep it

We keep the address until you unsubscribe or ask us to delete it. If you have not created an account in the Academy, the address is deleted no later than 12 months after the Academy has opened.

Guides as PDF

When you ask for a guide as a PDF, you enter your email address. The address is sent to Loops, which emails the guide to you. The address is used to send the guide. The legal basis is your consent, Article 6(1)(a). You give it by entering the address and pressing the button to get the guide. You can withdraw consent at any time by emailing info@hrafninn.se. This does not affect mailings already sent.

The address is stored at Loops until you ask us to delete it. Email info@hrafninn.se and we will delete it. Loops is based in the United States, and the transfer there takes place as described under the newsletter. You do not have to give the address, but without it we cannot send the guide.

Automated decisions

We make no automated decisions about you and do no profiling. Profiling means that information is analyzed automatically to draw conclusions about you.

Your rights

Write to info@hrafninn.se. We reply within one month.

  • Access (Article 15). You can ask what information we hold about you and get a copy.
  • Rectification (Article 16). You can ask us to correct information that is wrong.
  • Erasure (Article 17). You can ask us to delete information when we no longer need it, when you withdraw your consent and there is no other basis, when you object and we have no overriding grounds, when the processing is unlawful, or when the law requires deletion. On the forum you can also delete your account yourself.
  • Restriction (Article 18). You can ask us, in principle, only to store your information and not use it. You can do this while we check whether information is correct, if the processing is unlawful and you want us to block the information instead of deleting it, if we no longer need the information but you need it for a legal claim, or while we consider an objection from you.
  • Data portability (Article 20). It applies to information you have provided yourself that is processed automatically on the basis of your consent or a contract with you. You can get it in a common machine-readable format, and ask us to send it to someone else where technically possible.
  • Withdraw consent. You can do this at any time, without giving a reason, via the unsubscribe link in the email or by emailing us. The address is then deleted at Loops and in our list. What has already been done while consent applied is not affected.
  • Object (Article 21). How you object to processing based on legitimate interest is set out in the next section.

You can object

You can always object to us using your email address for the newsletter. You do not need to give a reason. We stop immediately. Use the unsubscribe link in the email or email info@hrafninn.se.

For reasons relating to your particular situation, you can object to processing based on legitimate interest. Here that means, first, delivering and protecting the site, that is, Cloudflare processing your IP address for that purpose, and second, on the forum, keeping the IP address of a post for 30 days to stop spam and abuse, keeping the limit of five posts per hour, and reviewing reports and removing posts that break the terms. The reason must concern your own situation.

If you object, we stop the processing, except when we can show compelling grounds that outweigh yours, or when we need the information for a legal claim. Write to info@hrafninn.se.

The Google connection

The Google connection applies only to the owner’s Gmail account.

The app “hrafninn-tldr” is connected only to the owner’s own Gmail account, not to any other user’s. It reads incoming newsletters and emails to summarize AI news, sorts and labels emails, and sends emails from the owner’s account. The content may be processed by AI services to create the summaries.

  • Gmail data is never sold.
  • It is never used for advertising.
  • It is not shared further.

The use follows Google’s API Services User Data Policy, including the Limited Use requirements.

Complaints

You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Last updated 31 October 2026.